Login Subscribe

Compliance & Regulation

CrowdStrike’s Human‑AI Loop Accelerates Zero‑Day Detection and Response

CrowdStrike’s Human‑AI Loop Accelerates Zero‑Day Detection and Response

CrowdStrike disclosed a “human‑AI feedback loop” in which threat analysts continuously inject contextual insights—such as tactics, techniques, and procedures (TTPs) and emerging indicator patterns—into its machine‑learning models. This bidirectional flow lets the AI refine its detection algorithms in real time, while analysts benefit from increasingly precise

Amaranth-Dragon Leverages CVE‑2025‑8088 to Target Southeast Asian Networks

Amaranth-Dragon Leverages CVE‑2025‑8088 to Target Southeast Asian Networks

Checkpoint researchers have linked the state‑aligned threat group Amaranth‑Dragon to active exploitation of the newly disclosed CVE‑2025‑8088 flaw. The actors deployed a bespoke malware loader that chains the vulnerability to gain initial code execution on vulnerable enterprise servers, then installs a stealthy back‑door. Traffic generated

VMware vDefend Adds Automated Micro‑Segmentation to Block Lateral Threats

VMware vDefend Adds Automated Micro‑Segmentation to Block Lateral Threats

VMware’s security team announced a major upgrade to its vDefend platform, embedding automated micro‑segmentation and continuous lateral‑movement monitoring into private‑cloud environments. The new capabilities automatically discover workloads, classify communication patterns, and enforce granular policies without manual rule creation, while a built‑in sensor watches for suspicious

Muddled Libra Leverages AI to Automate Phishing and Cloud Intrusions

Muddled Libra Leverages AI to Automate Phishing and Cloud Intrusions

Unit42’s latest investigation uncovered that the Muddled Libra ransomware group has embedded artificial‑intelligence models into its operational playbook. The AI generates highly personalized phishing content at scale, enabling the actors to bypass traditional email filters and harvest credentials more efficiently. Once inside a target network, they deploy PowerShell

Amaranth‑Dragon Exploits CVE‑2025‑8088 to Target SE Asian Critical Infrastructure

Check Point Research has identified the APT group Amaranth‑Dragon actively weaponizing the newly disclosed CVE‑2025‑8088 flaw. The actors are leveraging sophisticated multi‑stage payloads—initial spear‑phishing lures, custom‑crafted exploits, and fileless loaders—to gain footholds in ministries, energy utilities, and related supply‑chain networks across

AI‑Powered Zero Trust Automates Policy, Shrinks Attack Surface

AI‑Powered Zero Trust Automates Policy, Shrinks Attack Surface

VMware unveiled an AI‑driven platform that ingests user and device behavior data, then automatically creates and tunes granular zero‑trust access policies. The system continuously scores risk, revokes or grants permissions in real time, and updates policy rules without any manual input, effectively turning behavioral insight into enforceable controls.

VMware’s vDefend Adds Real‑Time Lateral‑Movement Blocking for Private Clouds

VMware’s vDefend Adds Real‑Time Lateral‑Movement Blocking for Private Clouds

VMware introduced vDefend, a new security layer that brings zero‑trust micro‑segmentation to private cloud environments. By continuously analyzing workload traffic with AI‑driven analytics, the platform automatically detects anomalous lateral‑movement patterns and enforces isolation policies without manual intervention. For defenders, vDefend means faster containment of ransomware, credential‑

Notepad Markdown Preview on Windows 11 Can Trigger Remote Code Execution

Notepad Markdown Preview on Windows 11 Can Trigger Remote Code Execution

Security researchers have found that the new markdown preview feature in Windows 11’s Notepad can be abused to achieve remote code execution. By opening a maliciously crafted markdown file, an attacker can cause Notepad to load and execute arbitrary code without any user interaction, leveraging a flaw in the